https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T17:08:16.225163+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-wordpress-2024-6307 BIT-wordpress-2024-6307 — WordPress Core < 6.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via HTML API 2026-10-03T17:08:16.295345+00:00

Affected: Bitnami: wordpress

WordPress Core is vulnerable to Stored Cross-Site Scripting via the HTML API in various versions prior to 6.5.5 due to insufficient input sanitization and output escaping on URLs. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

 https://cve.radiocsirt.org/vuln/euvd-2026-3352 EUVD-2026-3352 2026-10-03T17:08:16.295413+00:00 EUVD-2026-3352 https://cve.radiocsirt.org/vuln/fkie_cve-2024-6307 fkie_cve-2024-6307 2026-10-03T17:08:16.295436+00:00

WordPress Core is vulnerable to Stored Cross-Site Scripting via the HTML API in various versions prior to 6.5.5 due to insufficient input sanitization and output escaping on URLs. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

 https://cve.radiocsirt.org/vuln/ghsa-2f47-vffr-pwwf GHSA-2f47-vffr-pwwf 2026-10-03T17:08:16.295474+00:00

WordPress Core is vulnerable to Stored Cross-Site Scripting via the HTML API in various versions up to 6.5.5 due to insufficient input sanitization and output escaping on URLs. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-6307 UBUNTU-CVE-2024-6307 2026-10-03T17:08:16.295503+00:00

Affected: Ubuntu:16.04:LTS: wordpress, Ubuntu:18.04:LTS: wordpress, Ubuntu:20.04:LTS: wordpress, Ubuntu:22.04:LTS: wordpress, Ubuntu:24.04:LTS: wordpress

WordPress Core is vulnerable to Stored Cross-Site Scripting via the HTML API in various versions prior to 6.5.5 due to insufficient input sanitization and output escaping on URLs. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1454 WID-SEC-W-2024-1454 — WordPress: Mehrere Schwachstellen 2026-10-03T17:08:16.295549+00:00

Ein entfernter authentifizierter Angreifer kann mehrere Schwachstellen in WordPress ausnutzen, um einen Cross-Site-Scripting-Angriff zu starten oder Dateien zu manipulieren.